Authorization Matrix - 2022.02 and later

Users of the admin interface have to be assigned a role. These roles apply to both the Admin Interface GUI and REST API. The available roles are:

AI_VIEWER: read permissions on the Admin Interface functionality
AI_USER_MANAGER: allowed to do all user management, with the restrictions that no admin roles (AI_ADMIN and CM_ADMIN) can be assigned or removed from any users.
AI_ADMIN: create, read, update and delete permissions on the Admin Interface functionality. All functionality in the admin interface is available.

In the Authorization Matrix the following columns are available:

Main Menu: The name of the main menu in the Admin Interface where the functionality is available
Page: The specific page of the Admin Interface where the authorization applies.
Functonality: A description of the functionality that required authorization.
Operation: The kind of operation the authorization applies to. Can by create, read, update or delete.
Groups: The available groups and an indication if the specified functionality is allowed by members of that group.

1) Operations: Create, Read, Update and Delete permissions

Main Menu	Page	Functionality	Operations¹	AI_VIEWER	AI_USER_MANAGER	AI_ADMIN
System Status
	Dashboard	Show MC status, MC Component status, FSS status	read	YES	NO	YES
	Master controllers	Detail information about all master controllers	read	YES	NO	YES
	Forecasting Shell Servers	Detail information about all forecasting shells	read	YES	NO	YES
	View Logs	Display and download logfiles	read	YES	NO	YES
	Log Manager	Delete old log files by level or date	delete	NO	NO	YES
	Collect System Logs	Collect logfiles from system components	read	NO	NO	YES

Forecast Tasks
	Scheduled Tasks	Show scheduled tasks	read	YES	NO	YES
		View a task	read	YES	NO	YES
		Schedule a new task	create	NO	NO	YES
		Edit an existing task	update	NO	NO	YES
		Suspend one or more tasks	update	NO	NO	YES
		Resume one or more tasks	update	NO	NO	YES
		Cancel one or more tasks	update	NO	NO	YES
		Download all scheduled tasks	read	YES	NO	YES
		Upload scheduled tasks	create	NO	NO	YES
		Download tasks properties	read	YES	NO	YES
		Refresh and Hide One-off tasks	read	YES	NO	YES
	Running Tasks	Show running tasks	read	YES	NO	YES
		Kill running task	delete	NO	NO	YES
	Task Runs	Show task runs of scheduled task	read	YES	NO	YES

Workflows and FSSs
	Workflows	Show workflows	read	YES	NO	YES
		Download workflow file	read	YES	NO	YES
		Show workflow versions	read	YES	NO	YES
	Workflow FSS Group Mappings	Show mappings	read	YES	NO	YES
		Add a mapping	create	NO	NO	YES
		Delete a mapping	delete	NO	NO	YES
		Download all mappings	read	YES	NO	YES
		Upload mappings	update	NO	NO	YES
		Download mappings matrix	read	YES	NO	YES
	FSS Groups	Show FSS Groups	read	YES	NO	YES
		Download FSS Groups	read	YES	NO	YES
		Register new FSS Group	create	NO	NO	YES
		Edit FSS Group	update	NO	NO	YES
		Upload FSS Groups	create	NO	NO	YES
		Delete FSS groups	delete	NO	NO	YES
		Prioritize FSS Groups	update	NO	NO	YES
	Event and Action Mappings	Show Event Actions	read	YES	NO	YES
		Show Action Configuration Versions	read	YES	NO	YES
		Set Action Configuration Version Active	update	NO	NO	YES
		Delete Action Configuration Version	delete	NO	NO	YES
		Upload Action Configurations	create	NO	NO	YES
		Upload Action Mappings	create	NO	NO	YES
		Download Action Mappings	read	YES	YES	YES
		Add Action Mapping	create	NO	NO	YES
		Delete Action Mapping	delete	NO	NO	YES
		Test Action Mapping	update	NO	NO	YES

Files
	Import Status	Show import status of data	read	YES	NO	YES
		Delete import status data feed	delete	NO	NO	YES
	Failed Imports	Show failed imports	read	YES	NO	YES
	Successful Imports	Show successful imports	read	YES	NO	YES
	Dump files	Show dump files	read	YES	NO	YES
	Archive Files for Import	Show archive files	read	YES	NO	YES
	Link to FTP site	Show ftp site	read	YES	NO	YES

User Administration
	Users	Show users	read	NO	YES	YES
		Add user	create	NO	YES	YES
		Edit user	update	NO	YES	YES
		Delete user	delete	NO	YES	YES
		Regenerate access key	update	NO	YES	YES
	Groups	Show groups	read	YES	YES	YES
		Add user to group	create	NO	YES	YES
		Delete user from group	delete	NO	YES	YES
	Active Users	Show active users	read	YES	YES	YES
	Active Services	Show active services	read	YES	YES	YES

System Control
	System Control	Reindex files	update	NO	NO	YES
		Set to failover status	update	NO	NO	YES
		Set to duty (operational) status	update	NO	NO	YES
	Failover priorities	Show priorites	read	NO	NO	YES
		Add priority	create	NO	NO	YES
		Edit priority	update	NO	NO	YES
		Delete priority	delete	NO	NO	YES
	Synchronization	Enable synchronization	update	NO	NO	YES
		Disable synchronization	update	NO	NO	YES

Database Analysis
	Database Trends	Show database trends	read	YES	NO	YES
	Time Series	Show time series statistics	read	YES	NO	YES
	Time Series with Multiple SynchLevels	Show time series with multiple synch levels statistics	read	YES	NO	YES
	Warm States	Show warm states statistics	read	YES	NO	YES
	Cold States	Show cold states statistics	read	YES	NO	YES
	Map Layers	Show map layer statistics	read	YES	NO	YES
	Module Instance Data Sets	Show module instance data sets statistics	read	YES	NO	YES
	Module Instance Configurations	Show module instance configurations statistics	read	YES	NO	YES

Software and Configuration Management
	Patch	Show Date of last uploaded Config Manager patch	read	NO	NO	YES
		Upload a patch file	create	NO	NO	YES
	Basebuilds	Show uploaded basebuilds	read	NO	NO	YES
		Upload a new basebuild	create	NO	NO	YES
	Config Zip	Upload a Delft-FEWS configuration zip file	create	NO	NO	YES
	Master Controller Config XML	Upload a MC Configuration XML	create	NO	NO	YES
		Download a MC Configuration XML	read	NO	NO	YES

Page tree

Authorization Matrix - 2022.02 and later